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ABSTRACT 

This thesis describes the application of computer 
simulation techniques to auditing a military payroll system. 
After review of the system, a simulation model was 
constructed to assist the auditor during the preliminary 
evaluation in establishing threshold limits for internal 
control compliance. The model describes potential errors 
and irregularities that could occur, their probability of 
occurrence, and the internal controls that should prevent or 
detect those errors. Given the probability of various 
errors and the internal control compliance rates, the model 
generates the expected value and standard deviation of the 
error in the system putput data. This output data serves as 
an objective basis fpr judging the adequacy of the system. 
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• INTR ODU CTION 



A. GENERAL 

Section 320 of Statement on Auditing Standards No. 1 
contains the following outline of an approach for evaluating 
internal control: 

A conceptually logical approach to the 
auditor's evaluation of accounting control, which 
focuses directly on the purpose of preventing or 
detecting material errors and irregularities in 
financial statements, is to apply the following 
steps in considering each significant class of 
transactions and related assets involved in the 
audit: 

a. . Consider the types of errors and 
irregularities that could occur. 

b. Determine the accounting control procedures 
that should prevent or detect such errors and 
irregularities. 

c. Determine whether the necessary procedures arc 
prescribed and are being followed satisfactorily. 

d. Evaluate any weaknesses (i.e., types of 
potential errors and irregularities not covered by 
existing control procedures) to determine their 
effect on (1) the nature, timing, or extent of 
auditing procedures to be applied and (2) 
suggestions to be made to the client. 1 

Although this outline is tailored to the specific 
reguirements of a final evaluation of internal controls 
(i.e., the evaluation performed siibseguent to compliance 



1 Committee on Auditing Procedures, Statement of Auditing 
•Standards J1 , American Institute of Certified ~TuETic 
■Accountants, Inc., 1973, p. 31. 
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testing) , paragraph 54 of section 320 recommends that the 
same basic approach be employed for a "preliminary" 
evaluation of internal controls. 

Preliminary evaluations are normally performed 
immediately after prescribed internal controls are reviewed 
but before compliance tests are designed and performed. The 
major purposes of a preliminary evaluation are threefold: 

1. To identify obvious strengths and weaknesses in 
prescribed accounting controls which could have a bearing on 
the audit program ultimately applied. 

2. To develop a tentative audit strategy of compliance 
tests and substantive procedures early in the audit. 

3. To establish upper precision limits (i.e., tolerable 
error rates) for compliance tests compatible with this 
tentative audit program. 

B. PRELIMINARY EVALUATION PROBLEMS 

Impl ecentation difficulties often arise when the section 
320 evaluation approach is employed to perform an evaluation 
of an extensive system of internal controls. Many systems 
reguiring a total system approach involve the processing of 
several different classes of transactions . Such systems are 
often composed of a multitude of interrelated internal 
controls. Under these circumstances, it is often difficult 
to assess the potential financial statement impact of each 
control, and even more difficult to assess the potential 
joint impact of aJ.1 controls. When internal controls 
operate in either a joint or feedback fashion, as they often 
do in inventory or payroll systems, conceptual evaluation of 
the system can become hopelessly complex. As a result, 
several accounting researchers have set out to develop 
analytical methods to assist the auditor in evaluating 
complex internal control systems. Thus far, the following 
three methods have been proposed: 

1. A matrix algebra approach proposed by Professors Yu 
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